General

  • Target

    new_iceid_loader.exe_

  • Size

    142KB

  • Sample

    210304-246t92p7va

  • MD5

    17091a1e444f306b928d69f2b905bc8b

  • SHA1

    1078744833050626e9681c7c233c3a0963a0b559

  • SHA256

    76cd290b236b11bd18d81e75e41682208e4c0a5701ce7834a9e289ea9e06eb7e

  • SHA512

    4a62f6a289f06b90d6ca080793cf4ae85e1adca3c2d83c66375ae6458f8ed9d58d7e57649634d7e4a722e7c1f252156883641c822590d38c70d9dbadec6fa29d

Malware Config

Extracted

Family

icedid

C2

boldidiotruss.xyz

nizaoplov.xyz

153ishak.best

ilu21plane.xyz

Targets

    • Target

      new_iceid_loader.exe_

    • Size

      142KB

    • MD5

      17091a1e444f306b928d69f2b905bc8b

    • SHA1

      1078744833050626e9681c7c233c3a0963a0b559

    • SHA256

      76cd290b236b11bd18d81e75e41682208e4c0a5701ce7834a9e289ea9e06eb7e

    • SHA512

      4a62f6a289f06b90d6ca080793cf4ae85e1adca3c2d83c66375ae6458f8ed9d58d7e57649634d7e4a722e7c1f252156883641c822590d38c70d9dbadec6fa29d

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks